Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat's SQLite component may let attackers cause data issues

published 2 months ago

Summary

The version of SQLite included in Red Hat Linux has a security weakness that could let a malicious user corrupt or read data they shouldn't. This could affect any applications that rely on SQLite for storing information. Install the latest Red Hat security update for SQLite as soon as possible to protect your systems.

What to do

Update redhat lemon-debuginfo to version 0:3.34.1-6.el9_2.3.
Update redhat sqlite to version 0:3.34.1-6.el9_2.3.
Update redhat sqlite-analyzer-debuginfo to version 0:3.34.1-6.el9_2.3.
Update redhat sqlite-debuginfo to version 0:3.34.1-6.el9_2.3.
Update redhat sqlite-debugsource to version 0:3.34.1-6.el9_2.3.
Update redhat sqlite-devel to version 0:3.34.1-6.el9_2.3.
Update redhat sqlite-libs-debuginfo to version 0:3.34.1-6.el9_2.3.
Update redhat sqlite-tcl-debuginfo to version 0:3.34.1-6.el9_2.3.
Update redhat sqlite-tools-debuginfo to version 0:3.34.1-6.el9_2.3.
Update redhat sqlite-libs to version 0:3.34.1-6.el9_2.3.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_e4s:9.2::appstream	redhat	lemon-debuginfo	< 0:3.34.1-6.el9_2.3 Fix: upgrade to 0:3.34.1-6.el9_2.3
Red Hat:rhel_e4s:9.2::appstream	redhat	sqlite	< 0:3.34.1-6.el9_2.3 Fix: upgrade to 0:3.34.1-6.el9_2.3
Red Hat:rhel_e4s:9.2::appstream	redhat	sqlite-analyzer-debuginfo	< 0:3.34.1-6.el9_2.3 Fix: upgrade to 0:3.34.1-6.el9_2.3
Red Hat:rhel_e4s:9.2::appstream	redhat	sqlite-debuginfo	< 0:3.34.1-6.el9_2.3 Fix: upgrade to 0:3.34.1-6.el9_2.3
Red Hat:rhel_e4s:9.2::appstream	redhat	sqlite-debugsource	< 0:3.34.1-6.el9_2.3 Fix: upgrade to 0:3.34.1-6.el9_2.3
Red Hat:rhel_e4s:9.2::appstream	redhat	sqlite-devel	< 0:3.34.1-6.el9_2.3 Fix: upgrade to 0:3.34.1-6.el9_2.3
Red Hat:rhel_e4s:9.2::appstream	redhat	sqlite-libs-debuginfo	< 0:3.34.1-6.el9_2.3 Fix: upgrade to 0:3.34.1-6.el9_2.3
Red Hat:rhel_e4s:9.2::appstream	redhat	sqlite-tcl-debuginfo	< 0:3.34.1-6.el9_2.3 Fix: upgrade to 0:3.34.1-6.el9_2.3
Red Hat:rhel_e4s:9.2::appstream	redhat	sqlite-tools-debuginfo	< 0:3.34.1-6.el9_2.3 Fix: upgrade to 0:3.34.1-6.el9_2.3
Red Hat:rhel_e4s:9.2::baseos	redhat	lemon-debuginfo	< 0:3.34.1-6.el9_2.3 Fix: upgrade to 0:3.34.1-6.el9_2.3
Red Hat:rhel_e4s:9.2::baseos	redhat	sqlite	< 0:3.34.1-6.el9_2.3 Fix: upgrade to 0:3.34.1-6.el9_2.3
Red Hat:rhel_e4s:9.2::baseos	redhat	sqlite-analyzer-debuginfo	< 0:3.34.1-6.el9_2.3 Fix: upgrade to 0:3.34.1-6.el9_2.3
Red Hat:rhel_e4s:9.2::baseos	redhat	sqlite-debuginfo	< 0:3.34.1-6.el9_2.3 Fix: upgrade to 0:3.34.1-6.el9_2.3
Red Hat:rhel_e4s:9.2::baseos	redhat	sqlite-debugsource	< 0:3.34.1-6.el9_2.3 Fix: upgrade to 0:3.34.1-6.el9_2.3
Red Hat:rhel_e4s:9.2::baseos	redhat	sqlite-libs	< 0:3.34.1-6.el9_2.3 Fix: upgrade to 0:3.34.1-6.el9_2.3
Red Hat:rhel_e4s:9.2::baseos	redhat	sqlite-libs-debuginfo	< 0:3.34.1-6.el9_2.3 Fix: upgrade to 0:3.34.1-6.el9_2.3
Red Hat:rhel_e4s:9.2::baseos	redhat	sqlite-tcl-debuginfo	< 0:3.34.1-6.el9_2.3 Fix: upgrade to 0:3.34.1-6.el9_2.3
Red Hat:rhel_e4s:9.2::baseos	redhat	sqlite-tools-debuginfo	< 0:3.34.1-6.el9_2.3 Fix: upgrade to 0:3.34.1-6.el9_2.3

Original advisory text

Red Hat Security Advisory: sqlite security update

References

https://access.redhat.com/errata/RHSA-2026:62232 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2487258 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2487269 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_62232.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-11822 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-11822 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-11822 Vendor Advisory
https://sqlite.org/releaselog/3_53_2.html Third Party Advisory
https://sqlite.org/src/info/061febcf41ca Third Party Advisory
https://sqlite.org/src/info/4a5ad516ea93 Third Party Advisory
https://www.vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-ext... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-11824 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-11824 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-11824 Vendor Advisory
https://www.vulncheck.com/advisories/sqlite-before-heap-buffer-overflow-via-fts5... Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.8 High

Timeline

Published2 Sep 2026

Updated3 Sep 2026

First seen3 Sep 2026

Sources

RHSA-2026:62232 · OSV

Track software like this

Free during beta